Memory Corruption Vulnerability in NI Circuit Design Suite by National Instruments

CVE-2025-30419

What is CVE-2025-30419?

A memory corruption vulnerability exists in NI Circuit Design Suite, stemming from an out of bounds read in the GetSymbolBorderRectSize() function while using the SymbolEditor. This flaw can potentially allow an attacker to disclose sensitive information or execute arbitrary code on an affected system. Successful exploitation necessitates user interaction, as it requires them to open a maliciously crafted .sym file. This vulnerability impacts versions of NI Circuit Design Suite released prior to 14.3.0 and can pose significant risks to users who fail to apply necessary updates.

References